3a8d7d2373308d2f23fe90c3ecdb6972cb5f6c45da051d074e2ac2b39243afa0

Analysis

max time kernel
25s
max time network
47s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
03/10/2022, 01:23

Target

3a8d7d2373308d2f23fe90c3ecdb6972cb5f6c45da051d074e2ac2b39243afa0.exe
Size

112KB
MD5

511605e9ca0bb1a3e952ad06950a1cf0
SHA1

9d8f550f95e0221ac3a74e49aa117a0b7c903f24
SHA256

3a8d7d2373308d2f23fe90c3ecdb6972cb5f6c45da051d074e2ac2b39243afa0
SHA512

46fdbab88776e8070983d2e53156235ccc30f879ad6a62b8b30735fdf2e7e7b1d5b57caae14a36c97aa9f82114113929f1512981a447eab3a36532876f31e6cf
SSDEEP

1536:+fPrJbf6MwESj1cLZqDghxkdxSVmquXFTCeP7rpT/TNmYcRN0vkSjRAg:rhESZcLZq0hpuXFTCxYHhRA

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2044	828	WerFault.exe	28

Suspicious use of UnmapMainImage 1 IoCs

pid	Process
944	3a8d7d2373308d2f23fe90c3ecdb6972cb5f6c45da051d074e2ac2b39243afa0.exe

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 944 wrote to memory of 828	944	3a8d7d2373308d2f23fe90c3ecdb6972cb5f6c45da051d074e2ac2b39243afa0.exe	28
PID 944 wrote to memory of 828	944	3a8d7d2373308d2f23fe90c3ecdb6972cb5f6c45da051d074e2ac2b39243afa0.exe	28
PID 944 wrote to memory of 828	944	3a8d7d2373308d2f23fe90c3ecdb6972cb5f6c45da051d074e2ac2b39243afa0.exe	28
PID 944 wrote to memory of 828	944	3a8d7d2373308d2f23fe90c3ecdb6972cb5f6c45da051d074e2ac2b39243afa0.exe	28
PID 944 wrote to memory of 828	944	3a8d7d2373308d2f23fe90c3ecdb6972cb5f6c45da051d074e2ac2b39243afa0.exe	28
PID 944 wrote to memory of 828	944	3a8d7d2373308d2f23fe90c3ecdb6972cb5f6c45da051d074e2ac2b39243afa0.exe	28
PID 944 wrote to memory of 828	944	3a8d7d2373308d2f23fe90c3ecdb6972cb5f6c45da051d074e2ac2b39243afa0.exe	28
PID 828 wrote to memory of 2044	828	svchost.exe	29
PID 828 wrote to memory of 2044	828	svchost.exe	29
PID 828 wrote to memory of 2044	828	svchost.exe	29
PID 828 wrote to memory of 2044	828	svchost.exe	29

memory/828-54-0x0000000000080000-0x0000000000089000-memory.dmp

Filesize
36KB

Download
memory/828-56-0x0000000000080000-0x0000000000089000-memory.dmp

Filesize
36KB

Download
memory/828-60-0x0000000000690000-0x0000000000698000-memory.dmp

Filesize
32KB

Download
memory/828-61-0x0000000000080000-0x0000000000089000-memory.dmp

Filesize
36KB

Download
memory/944-59-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download